You are the network administrator for your company. There are three Microsoft Forefront for SharePoint (FSSP) servers in the network. A FSSP server named Spoint receives its scan engine updates directly from Microsoft Update server. You want other FSSP servers in the network to download scan engine updates from Spoint server. You configure the Spoint server to act as a redistribution server.

What should you next?

Enable the Scan on Scanner Updates option on FSSP servers other than the Spoint server.

Enable the Windows Update feature on FSSP servers other than the Spoint server.

Configure the FSSP spoke servers to receive updates from the redistribution server.

Configure the secondary update path on the Spoint server.

Answer:C. Configure the FSSP spoke servers to receive updates from the redistribution server.

Tutorial:You should configure the FSSP spoke servers to receive updates from the redistribution server to achieve the objective in this scenario. You can configure a FSE server to download the scan engine updates directly from the Microsoft HTTP server or to receive the updates from another server in the network, known as the hub or the redistribution server. The redistribution FSE server will download and make the updates available for other FSE servers in the network. The redistribution server saves the two most recent scan engine update packages and keeps them available for distribution. Once you configure a redistribution server, configure the primary network update path on other FSE servers (spoke servers) as the Universal Naming Convention (UNC) path pointing to the redistribution server. The UNC path is defined as follows:

\ServerNameShareName

Where ServerName is the computer name of the FSE server and ShareName is the name of the shared folder where the updates are stored. Using a redistribution share will help you reduce Internet bandwidth consumption, as FSE servers will use the internal network to download virus definition updates.

You should not enable the Scan on Scanner Updates option on FSSP servers other than the Spoint server to achieve the objective in this scenario. The Scan on Scanner Update feature can be enabled when you want the FSE server to rescan all previously scanned files after a scan engine update. Enabling Scan on Scanner Update provides the best possible protection on the Exchange server. However, this feature also can have a negative impact on the FSE server’s performance and is disabled by default.

You should not enable the Windows Update feature on FSSP servers other than the Spoint server to achieve the objective in this scenario. The Windows Update feature is enabled for a Windows-based computer to monitor for critical updates or security fixes available for download or to update the operating system.

You should not configure the secondary update path on the Spoint server to achieve the objective in this scenario. You should configure the secondary network update path on the Spoint server when you want the server to follow a different secondary path when the primary update path fails for any reason.